Haskell Auditing Tool

Abstract

We present HATS, an auditing tool Haskell developers can use to inspect, query, and detect changes in functional dependencies, including transitive dependencies. We present this tool for Haskell, implemented in Haskell. Using a Core plugin, it analyses the program's call graph to find dependencies between functions. We demonstrate, using an example, how HATS can help detect attacks such as supply chain attacks.